A sophisticated Russian influence operation dubbed “Matryoshka”—also known as “Overload”—has been unmasked in the lead-up to critical regional and local elections across Germany. An investigation by Deutsche Welle’s (DW) fact-checking desk, utilizing data provided by the research collective Antibot4Navalny, identified over 180 coordinated fake social media posts disseminated across X, Bluesky, and TikTok. These posts, which began surfacing on June 24, were strategically scheduled to appear only on weekdays, suggesting a professional, office-based operation designed to maximize visibility during peak digital engagement periods.
The campaign specifically targeted upcoming state parliament elections in Saxony-Anhalt and Mecklenburg-Western Pomerania, as well as races in Berlin and Lower Saxony. Analysts noted a clear political bias in the operation’s targeting strategy: the disinformation consistently attacked candidates from all major mainstream political parties while conspicuously avoiding the far-right Alternative for Germany (AfD) and the left-populist Sahra Wagenknecht Alliance. By sparing these specific factions, the campaign appears to favor political movements that historically align with or promote more sympathetic views toward Moscow.
According to Pablo Maristany de las Casas of the Institute for Strategic Dialogue, the overarching goal of the Matryoshka operation is to promote narratives that are overtly pro-Russian, anti-German, and anti-European. The disinformation effort utilized two primary tactics to achieve this. The first involved the use of AI-generated content to manufacture explosive scandals, such as fabricated accusations of murder, drug use, and corruption. In one egregious example, a synthetic video falsely accused Berlin’s governing mayor, Kai Wegner, of murdering a professional tennis player—a crime that never occurred and for which no police investigation exists.
The second, more insidious direction of the campaign focused on psychological warfare aimed at deepening the historical and social fractures between eastern and western Germany. By manufacturing content—including a fake Eurostat report claiming that western Germans view reunification as a “historical mistake”—the operators sought to rekindle resentment. Other fabrications included conspiracy theories about state-sanctioned discrimination against eastern Germans, rumors of a new “Berlin Wall,” and projections of a formal partition of the country by 2030, all designed to exploit regional identity politics for electoral instability.
While a direct, ironclad link between the Russian state and the Matryoshka operation remains under investigation, the technical footprint aligns with known state-backed entities. The OSINT group Gnida Project has drawn strong parallels between Matryoshka and “Storm-1516,” an influence operation widely attributed to Russia’s military intelligence agency, the GRU. These findings fit into a broader pattern of Kremlin-backed hybrid warfare, which currently includes intensified cyberattacks and espionage campaigns targeting European nations like Poland, suggesting a synchronized effort to destabilize the European Union from within.
Despite the high production value of the content and the vast reach of some posts—with select items garnering over 100,000 views—experts currently categorize the campaign’s impact as limited. The research indicates that these views are largely the result of artificial boosting rather than genuine public interest; there is a notable lack of organic interaction, such as shares or meaningful commentary, among the German electorate. Nevertheless, the sophistication and persistence of the Matryoshka operation serve as a stark reminder of the evolving threats to democratic integrity as foreign actors continue to refine their use of AI and social media to manipulate the political discourse of sovereign nations.
